kernel-netlink: Also use interface returned by get_nexthop() for IPsec policies